Threats tagged 'ghsa-2v39-q9qf-3m9g'

netrek-client-cow versions through 3.3.3 have a stack-based buffer overflow vulnerability in the handleSMessage() function within short.c. This flaw allows malicious Netrek servers or man-in-the-middle attackers on the plaintext TCP connection to send oversized SP_S_MESSAGE packets that overflow a 100-byte stack buffer, potentially crashing the client application.